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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1. (Currently Amended) A method for taking a policy decision by a 
policy decision device, wherein the policy decision device has access to objects being 
relatable to each other by relations of one or more relation types, the method 
comprising the steps of 

- receiving a request for the policy decision, the request specifying a first object 
of the objects and request information , said objects comprising entities that are 
controllable bv one or more policies, said entities comprising person related data, 
computer devices, or applications . 

- obtaining a policy matching to the request information and being applicable to a 
second object of the objects, 

- obtaining at least one propagation rule associated to the policy, the at least one 
propagation rule specifying at least one relation type of the one or more relation types, 

- verifying if a relation path exits, the relation path linking the first object and the 
second object and consisting of one or more of the relations, 

- verifying f the one or more relations of the relation path are in accordance with 
at least one of the at least one specified relation type, and 

- if said relation path exists and if said one or more relations of the relation path 
are in accordance, applying the policy to the first object for taking the policy decision. 

2. (Previously Presented) The method according to claim 1 , wherein the 
at least one propagation rule specifies at least one direction and the method further 
comprises the step of verifying if the one or more relations of the relation path are in 
accordance with the at least one specified direction. 
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3. (Previously Presented) The method according to claim 1 , wherein the 
at least one propagation rule specifies at least one condition that is verified for at least 
one of the objects of the relation path. 

4. (Previously Presented) The method according to claim 1 , wherein the 
existence of the relation path is considered for obtaining the policy. 

5. (Previously Presented) The method according to claim 1 , wherein the 
at least one propagation rule is obtained from at least one propagation rule database on 
the basis of at least one reference identifier associated to the at least one propagation 
rule and the policy. 

6. (Previously Presented) The method according to claim 1 , wherein at 
least one further policy component of the policy is obtained from at least one policy 
component database based on at least one reference identifier associated to the at 
least one further policy component and the policy. 

7. (Currently amended) A policy decision device for taking a policy 
decision, the policy decision device comprising: 

a receiving unit and 
a processing unit, 
wherein 

the processing unit is adapted to acGOSS accesses objects being relatable 
to each other by relations of one or more relation types, 

the receiving unit i o adapted to rocoivo receives a request for the policy 
decision, the request specifying a first object of the objects and request 
information , said objects comprising entities that are controllable by one or more 
policies, said entities comprising person related data, computer devices, or 
applications . 
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the processing unit is further adapted to obtain obtains a policy matching 
to the request information and being applicable to a second object of the objects, 
to obtain at least one propagation rule associated to the policy, the at least one 
propagation rule specifying at least one relation type of the one or more relation 
types, to verify if a relation path exits, the relation path linking the first object and 
the second object and consisting of one or more of the relations, to verify if the 
one or more relations of the relation path are in accordance with at least one of 
the at least one specified relation type, and if said relation path exists and if said 
one or more relations of the relation path are in accordance, to apply the policy to 
the first object for taking the policy decision. 

8. (Previously Presented) The policy decision device according to claim 
7, wherein the at least one propagation rule specifies at least one direction and the 
processing unit is adapted to verify if the one or more relations of the relation path are in 
accordance with the at least one specified direction. 

9. (Previously Presented) The policy decision device according to claim 
7, wherein the at least one propagation rule specifies at least one condition and the 
processing unit is adapted to verify, for at least one of the objects of the relation path, if 
said at least one object is in accordance with the at least one condition. 

1 0. (Previously Presented) The policy decision device according to claim 
7, wherein the processing unit is adapted to consider the existence of the relation path 
for the obtaining of the policy. 

1 1 . (Previously Presented) The policy decision device according to claim 
7, wherein the processing unit is adapted to obtain the at least one propagation rule 
from at least one propagation rule database on the basis of at least one reference 
identifier associated to the at least one propagation rule and the policy. 
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1 2. (Previously Presented) The policy decision device according to claim 
7, wherein the processing unit is adapted to obtain at least one further policy component 
of the policy from the at least one policy component database based on at least one 
reference identifier associated to the at least one further policy component and the 
policy. 

1 3. (Currently amended) A computer program loadabl e into readable 
medium of a policy decision device, the computer program readable medium compr i sing 
codo adaptod having stored thereon a plurality of instructions, the plurality of 
instructions including instructions which, when executed by a processor, cause the 
processor to perform the steps of a method for taking a policy decision, comprising: 

accessing to accocs objects being relatable to each other by relations of one or 
more relation types, to process a request for a policy decision, the request specifying a 
first object of the objects and request information , said objects comprising entities that 
are controllable by one or more policies, said entities comprising person related data, 
computer devices, or applications . 

obtaining to obtain a policy matching to the request information and being 
applicable to a second object of the objects, 

obtaining to obtain at least one propagation rule associated to the policy, the at 
least one propagation rule specifying at least one relation type of the one or more 
relation types, 

verifying to vor i fy if a relation path exits, the relation path linking the first object 
and the second object and consisting of one or more of the relations, 

verifying to v e r i fy if the one or more relations of the relation path are in 
accordance with at least one of the at least one specified relation type, and 

if said relation path exists and if said one or more relations of the relation path 
are in accordance, applying to app l y the policy to the first object for taking the policy 
decision. 
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14. (Currently amended) The computer program readable medium 
according to claim 13, wherein the at least one propagation rule specifies at least one 
direction and the computer program comprises code adapted to verify if the one or more 
relations of the relation path are in accordance with the at least one specified direction. 

1 5. (Currently amended) The computer program readable medium 
according to claim 13, wherein the at least one propagation rule specifies at least one 
condition and the computer program comprises code adapted to verify for at least one 
of the objects of the relation path if said at least one object is in accordance with the at 
least one condition. 

1 6. (Currently amended) The computer program readable medium 
according to claim 13, wherein the computer program comprises code adapted to 
consider the existence of the relation path for obtaining the policy. 

1 7. (Currently amended) The computer program readable medium 
according to claim 13, wherein the computer program comprises code adapted to obtain 
the at least one propagation rule from at least one propagation rule database on the 
base of at least one reference identifier associated to the at least one propagation rule 
and the policy. 

1 8. (Currently amended) The computer program readable medium 
according to claim 13, wherein the computer program comprises code adapted to obtain 
at least one further policy component of the policy from the at least one policy 
component database based on at least one reference identifier associated to the at 
least one further policy component and the policy. 
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